Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
File: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft (raw, json)
Hash identifier: 1yGYkSqfN1UDqChfsgcl20Yosk0oinBbVDy8J0/eJws=
Subject key identifier: B8:63:EA:BE:BD:03:84:CA:2F:BA:0C:EB:8A:21:0A:10:D1:69:3C:44
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 019926697C104510F8BE9AC5EF92D26C2EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
Manifest number: 154A
Signing time: Sun 07 Sep 2025 23:01:10 +0000
Manifest this update: Sun 07 Sep 2025 23:01:10 +0000
Manifest next update: Mon 08 Sep 2025 23:01:10 +0000
Files and hashes: 1: 8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl (hash: KHTJbe5p0JVfLPmiE6A2lxRY1TmOo1OL9/0K/JQVem4=)
2: kvZo-BdFpFiAumpYOAN_8hogK54.roa (hash: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:69:7c:10:45:10:f8:be:9a:c5:ef:92:d2:6c:2e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Sep 7 23:01:10 2025 GMT
Not After : Sep 8 23:01:10 2025 GMT
Subject: CN=b863eabebd0384ca2fba0ceb8a210a10d1693c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:e0:f8:7c:04:73:f2:79:2a:6d:01:34:10:
20:44:43:f8:c1:cd:8c:4a:16:ed:03:e2:de:7f:ed:
f1:40:8e:e6:a3:66:4b:51:e2:a5:11:ae:38:73:ea:
c2:61:a1:d7:26:8a:2f:47:80:29:82:e7:60:c4:33:
f6:3a:41:2c:dc:7f:c1:a7:1e:e4:63:b2:85:48:5e:
59:ed:b7:a6:f2:48:f7:87:25:8c:16:a9:5d:d9:ad:
58:70:71:d6:73:7a:36:80:8f:ad:4e:e4:f9:06:b6:
21:bb:bd:66:ba:ff:c8:54:d1:22:d6:9c:3e:7b:60:
d8:91:da:cf:85:e2:66:0f:41:b8:38:24:18:e3:3a:
87:f4:86:31:f4:eb:cc:51:49:a1:45:ef:b9:5f:07:
cc:75:66:e7:e9:41:7d:ae:5f:3a:3c:f6:15:f6:e0:
77:ee:66:63:95:07:2e:ca:85:a1:2a:dd:57:52:b7:
7d:50:4d:2f:1f:37:42:96:86:75:ad:ab:1c:33:28:
26:4b:63:51:97:d8:99:17:ce:3d:92:fa:c6:ec:15:
10:55:a7:22:98:c4:dc:be:41:54:1b:2c:c9:ef:16:
5d:1a:e0:cc:d3:51:9f:db:a7:2d:d5:9c:88:58:05:
44:16:45:09:9f:ad:9d:6c:1e:4d:60:b1:75:83:e1:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:EA:BE:BD:03:84:CA:2F:BA:0C:EB:8A:21:0A:10:D1:69:3C:44
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:04:3c:b5:e5:ed:91:a7:f1:da:5b:f3:0d:36:09:40:bf:
70:18:b0:8e:1b:dc:af:80:e8:45:4c:a0:85:72:cc:02:0e:e1:
18:c4:71:2c:3c:bb:92:83:89:c2:78:2b:de:1f:b5:93:98:02:
89:04:0b:e2:40:09:64:c0:ce:50:78:90:1a:5f:6d:08:15:56:
26:e3:53:9b:15:c0:7f:d4:d8:c9:52:9b:57:32:0e:60:a0:4b:
72:82:f3:fc:ab:9c:f1:8a:4e:d1:b1:eb:a8:42:18:41:97:8e:
11:2c:cd:e2:76:1d:91:98:ed:a4:da:35:c6:94:72:dd:d6:6c:
1b:85:90:f0:ce:41:2e:28:c8:b1:43:e8:7a:8b:27:d8:e1:6b:
89:76:2b:62:0e:89:48:89:9f:13:dc:22:48:42:f0:6c:4b:5e:
b7:85:35:ec:9c:8c:f4:ff:1e:06:b1:47:3d:fe:ed:7a:de:5e:
79:48:7d:b7:c6:e8:c1:b0:67:ff:f7:64:30:11:d3:8c:e1:df:
12:70:74:ab:0d:3e:f1:b7:f0:6a:d9:ee:be:38:6a:fc:8d:40:
2d:85:e9:49:40:4d:93:47:42:5a:8f:36:da:80:03:99:8c:d3:
38:db:cd:fa:09:93:8c:27:d8:3f:ac:5e:c4:8d:13:86:15:a3:
25:25:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:48 2025 by rpki-client